Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
File:                     ejvLQKHIyPn3WNzeHCkHk42GhS8.mft (raw, json)
Hash identifier:          MLV0PhdrP1r51XbAI/dIaZZ+RfkKkN9qSPAiw2LDAKE=
Subject key identifier:   54:0B:52:30:3C:48:0E:93:2F:55:A1:6A:FD:CA:8B:EE:29:CB:9C:6B
Authority key identifier: 7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F
Certificate issuer:       /CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
Certificate serial:       0197B7B3420BFA5E7D0482DCDF26DD7DF10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
Manifest number:          07CD
Signing time:             Sat 28 Jun 2025 18:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 18:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 18:01:07 +0000
Files and hashes:         1: ejvLQKHIyPn3WNzeHCkHk42GhS8.crl (hash: Oj5g3BUbzF4ddK0LKwuT99lMCsnYlJrDMd4jebhQvkI=)
                          2: npO31UQ6MgQb_KXFRuB5cseCGq0.roa (hash: g4JN4BNjztb4rOd5YFRTGak1PKL3E9KOaxMHM6ZlfJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:b3:42:0b:fa:5e:7d:04:82:dc:df:26:dd:7d:f1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a3bcb40a1c8c8f9f758dcde1c2907938d86852f
        Validity
            Not Before: Jun 28 18:01:07 2025 GMT
            Not After : Jun 29 18:01:07 2025 GMT
        Subject: CN=540b52303c480e932f55a16afdca8bee29cb9c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:61:23:35:82:d3:64:8f:81:aa:db:a4:4a:
                    90:b6:db:db:40:8e:51:31:92:a6:06:c4:c5:ed:50:
                    a2:90:76:8e:1c:f3:72:9c:9b:ab:0d:af:e4:ea:0f:
                    de:c1:99:2d:0f:ca:9b:10:09:1c:5f:70:8f:07:0a:
                    06:f7:c5:c7:0f:9a:05:14:07:4b:12:0d:44:89:7e:
                    22:8b:32:c4:3c:8f:d2:1f:30:30:b6:1d:8f:a7:0c:
                    ea:ea:d4:2a:15:44:55:bf:de:c9:4c:03:58:d9:b1:
                    7c:e1:e5:e4:41:13:5f:20:0a:50:43:d3:77:dc:0a:
                    a6:70:f6:bd:c3:42:03:2c:c1:76:31:cf:19:e2:c0:
                    38:61:2e:82:f8:1d:a1:37:dc:59:8f:28:8d:22:d2:
                    05:2a:1a:2b:38:e3:6b:06:07:0b:88:0f:df:28:92:
                    7d:c1:1d:d6:f6:a4:7e:ae:cd:c4:2e:53:00:0d:ca:
                    c0:d0:04:4d:6a:26:33:31:ec:04:f4:70:9e:f2:3b:
                    e4:5f:2e:0d:4e:e6:1b:e9:23:1f:49:78:c0:5c:a4:
                    1a:52:4c:4d:2d:f2:ee:94:47:6c:c7:4d:19:12:97:
                    a4:8e:ef:8c:54:a4:65:0e:85:20:87:31:7a:eb:05:
                    3f:ae:6f:8f:d6:f7:84:c8:42:15:15:7c:f8:d0:b3:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0B:52:30:3C:48:0E:93:2F:55:A1:6A:FD:CA:8B:EE:29:CB:9C:6B
            X509v3 Authority Key Identifier:
                keyid:7A:3B:CB:40:A1:C8:C8:F9:F7:58:DC:DE:1C:29:07:93:8D:86:85:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejvLQKHIyPn3WNzeHCkHk42GhS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/bb3c6b-cd92-422f-9518-01652576f5a2/1/ejvLQKHIyPn3WNzeHCkHk42GhS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:3e:d1:2f:2f:ed:29:ea:80:e0:1a:67:ae:71:7e:be:3b:50:
         9c:6a:56:9a:f6:a3:0b:9b:70:2b:c4:97:5c:cb:bc:60:d4:4e:
         d9:a9:f1:1e:60:b5:9e:fb:cd:bc:d0:48:70:37:6f:ad:ca:81:
         12:1f:6a:65:47:e8:d0:47:86:9b:7c:95:68:f5:dd:53:41:a6:
         7d:ac:1f:40:07:98:46:69:f9:ae:5e:a8:20:aa:64:b0:ec:cd:
         2b:b9:8d:a6:c4:28:50:3d:7e:9d:72:9d:4a:17:cd:40:ff:90:
         37:eb:27:20:9f:ad:77:ab:7a:be:00:f2:f9:62:fa:52:95:02:
         6c:1f:aa:d0:45:71:06:24:cf:d9:65:cd:ad:62:eb:a1:cd:83:
         c9:5e:19:e8:0c:fa:d0:61:f5:3b:71:b3:e1:13:8a:62:4f:a7:
         d3:ef:31:00:6d:6a:ba:2f:35:ae:e8:0e:79:52:1e:c5:96:b4:
         b5:5c:cd:c2:a7:1e:38:89:c5:8d:a9:d9:8b:54:a5:f5:4c:02:
         13:40:10:01:05:f7:a6:85:63:a2:fe:7a:ab:66:e1:b1:b4:d2:
         d3:46:84:64:ee:42:29:2d:2b:75:2b:9c:42:cd:ee:9b:5a:ef:
         f4:1a:6b:4e:cf:22:e9:76:a1:c2:e5:f5:83:8c:44:c3:f0:1f:
         10:74:2a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:04 2025 by rpki-client